← Back

CVE-2026-33612

nvd nist
Published: Jun 25, 2026Modified: Jun 25, 2026Deferred

JSON object

Loading...
7.5
Vector
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:N/I:H/A:L
Exploitability: 2.2 / Impact: 4.7
Source: security@open-xchange.com (Secondary)

Description

A malicious authoritative server can send a crafted zone via the ZoneToCache function that leads to cache poisoning.

Related CWEs

CWE-349
Acceptance of Extraneous Untrusted Data With Trusted Data
The product, when processing trusted data, accepts any untrusted data that is also included with the trusted data, treating the untrusted data as if it were trusted.

References (1)

Source: security@open-xchange.com

Timeline

No history available yet.